password-reset-flaws

SUSPICIOUS: the skill is internally coherent, but its purpose is to equip an AI agent with offensive account-takeover testing techniques against password reset/change flows. There is no clear malware behavior, no hidden exfiltration endpoint, and no untrusted installer chain, yet the capability itself carries high misuse potential and real-world impact if used outside authorized security testing.